Audit Logging

AD Group Manager Web maintains a complete audit trail of all changes made through the application. Every member addition, member removal, group property edit, and member property edit is logged.

Navigate to the admin panel and click Logging in the navigation bar.

---

Enabling logging

Audit logging must be enabled in Settings before any changes are recorded. It is strongly recommended to enable logging from the start — once enabled, all subsequent changes are recorded automatically.

Changes made before logging was enabled are not retroactively logged.

---

What gets logged

Each log entry records:

Field	Description
Manager	Display name of the person who made the change
Manager username	sAMAccountName of the person who made the change
Type	The action type — see below
Member	Name of the affected member (for member operations)
Member username	sAMAccountName of the affected member
Group	Name of the affected group
Details	Specific details of what changed (for edits: old value → new value)
Date	Timestamp of the action

Action types

Type	Triggered when
Add	A member is added to a group
Remove	A member is removed from a group
Edit member	A member’s properties are modified (details show which fields changed and old/new values)
Edit group	A group’s properties are modified (details show which fields changed and old/new values)

---

Viewing the audit log

The Logging page displays a grid of all recorded actions, sorted by most recent first (up to 1,000 entries per view).

Searching the log

Use the search box to filter log entries. The search checks across all columns: manager name, manager username, action type, member name, member username, group name, and details. This makes it easy to answer questions like:

• “What changes did John make?” — search for john
• “Who modified the Finance group?” — search for Finance
• “Show all removals” — search for Remove

Sorting

Click any column header to sort the log by that column. Click again to reverse the sort order.

---

Log storage

Audit logs are stored in the local SQLite database (adgm.db). They are not sent externally and remain on your server. Logs persist across application restarts and upgrades.

---

Using logs for compliance

The audit trail provides documentation for compliance reviews and security audits. Common use cases:

• Who added this user to the group? — search by the member’s name to find the Add entry with the manager who performed it.
• What changed in the last week? — sort by date and review recent entries.
• Has anyone been removed from a sensitive group? — search for the group name and filter by “Remove” type.
• What properties were changed on a user account? — search for the member’s name and look for “Edit member” entries with details showing old and new values.

For automated reporting, configure Scheduled Reports to receive regular email summaries with a PDF attachment.

---

Relationship to notifications

Audit logging and email notifications are independent features:

• Logging records changes in the database for later review.
• Notifications send instant emails when changes occur.

You can enable either, both, or neither. For maximum oversight, enable both — logging provides the permanent record, and notifications provide real-time alerts.